Download, Review and Sign-Off
What the downloadable IDR contains
- source-based learner baseline;
- recommended SOC career pathway;
- 12-month roadmap;
- full 12-week applied sprint;
- curriculum and labs;
- assignments and portfolio projects;
- credential/skill milestones;
- calendar and review cadence;
- goals and KPIs;
- mentor process;
- governance/privacy rules;
- learning references.
First 10 working days
| Day range | Action | Evidence |
|---|---|---|
| 1–2 | Review baseline and target role | Confirmed capability matrix |
| 1–4 | Inventory Wazuh lab and available logs | Lab architecture diagram |
| 3–5 | Standardise investigation template | Reusable triage/investigation worksheet |
| 4–7 | Review GitHub portfolio structure | Portfolio cleanup issue/branch |
| 6–8 | Complete first Windows/Wazuh case | Investigation README |
| 8–10 | Conduct first one-on-one review | Feedback and next actions |
Formal review gates
Day 30
- workload and schedule are sustainable;
- Wazuh alert flow is understood;
- at least two investigations follow a repeatable method;
- GitHub evidence is clean and safe to publish.
Day 60
- at least one detection has a documented test and tuning process;
- the incident-response tabletop is complete;
- communication improvement is visible in written summaries;
- at least two portfolio artefacts are review-ready.
Day 90
- at least 10 sprint weeks are accepted or a recovery plan exists;
- at least three portfolio items are review-ready;
- one next specialisation direction is chosen;
- CV/LinkedIn/GitHub claims are evidence-linked.
Annual sign-off target
The roadmap is complete when Nkateko can demonstrate six strong portfolio artefacts, explain a realistic SOC case end to end, show safe GitHub/evidence practices and defend readiness for junior SOC/security-operations opportunities.
Sign-off
| Role | Name | Decision / signature | Date |
|---|---|---|---|
| Learner | Nkateko Mtembi | ||
| Mentor / coach | To be assigned | ||
| Skunkworks Academy review |
Review questions
- Does the portfolio prove investigation ability rather than only tool familiarity?
- Can Nkateko explain what evidence supports each conclusion?
- Is the Wazuh work tested and documented?
- Is communication becoming clearer and more concise?
- Are learning hours sustainable despite the high stated willingness to study?
- Does every public artefact respect the privacy/safe-lab boundary?